5e90e8c6599aa9a412b2e916b023c2c4_JaffaCakes118

General

Target

5e90e8c6599aa9a412b2e916b023c2c4_JaffaCakes118
Size

176KB
MD5

5e90e8c6599aa9a412b2e916b023c2c4
SHA1

4051a4ac3add8dcb0dffab101dd691ef4c732daa
SHA256

c0f139e743b7016e5bdcfb932c880fbba1b2e84ecafadee70070d26c0960c58f
SHA512

9629fdb5d329151f28cd5626ca3729a6fa1e4976ef1d4539e8b49434dad77c4f2def296da252bed79d1eda4e30c8bf0f693962831808082b7914f4a63f69f656
SSDEEP

3072:98FdrTtr2ReMVb5PX+yzNotreWSRl/C6Z9en8qvuSDqAxm7txxxGy/E:98Fdtr2kMVb5PXNodeVBC6bqvLW9sy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e90e8c6599aa9a412b2e916b023c2c4_JaffaCakes118

Files

5e90e8c6599aa9a412b2e916b023c2c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

367fda273362ad217efe83e10c954429

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

shlwapi

StrStrIA
SHEnumValueA
SHGetValueA
SHEnumKeyExA
SHSetValueA

advapi32

DeleteService
CloseServiceHandle
OpenSCManagerA
RegCreateKeyExA
OpenServiceA
StartServiceA
RegCloseKey
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegSetValueExA
CreateServiceA

ole32

CoCreateGuid
CoInitialize
CoCreateInstance

rpcrt4

UuidToStringA

shell32

SHGetSpecialFolderPathA

msvcrt

islower
isgraph
strerror
isupper
printf
strlen
tolower
memset
free
memcmp
time
strcat
strcpy
strncpy
rand
wcscpy
mbstowcs
sprintf
srand
atoi
fclose
fwrite
fopen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??2@YAPAXI@Z
isalpha
isxdigit
ispunct
__mb_cur_max
malloc
wctomb
isalnum
isspace
memcpy

imagehlp

ImageNtHeader

kernel32

lstrlenA
GetLastError
GetModuleHandleA
GetFileAttributesExA
SetFileTime
CreateFileA
GetSystemDirectoryA
SleepEx
GetLocalTime
ExitProcess
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
CloseHandle
WideCharToMultiByte
GetStartupInfoA
GetVersionExA

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

367fda273362ad217efe83e10c954429

Headers

File Characteristics

Imports

user32

shlwapi

advapi32

ole32

rpcrt4

shell32

msvcrt

imagehlp

kernel32

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 104KB - Virtual size: 103KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 104KB - Virtual size: 103KB